rerun migration to include password_digest
introduce sessions