remove password_digest from user params
Merge pull request #18 from hartsick/range-query

remove password_digest from user params