edit password_digest and add validations on user.rb