[6.3.1] add password_digest to user for authentication
[6.3.2-4] create password validations