add password_digest to users