begin authentication with bcrypt and add password_digest column to user