foo
remove password_digest in show.html.erb