new migration for password-digest