using has_secure_password, changed user table to include password_digest