add index to User.email
add password_digest to users
add password spec