created User model and spec, ran db migration
validate presence of user name and email, test validations
validate user name < 50 chars
validate email uniqueness (in memory)
validate email uniqueness at db level by creating email index in user table
installed bcrypt gem
add password digest attribute to User model & users table -- include test for response to :password_digest
add specs for secure password validation
validate secure password using bcrypt & has_secure_password
add db migration w/ password fields to repo (oops), add tests for email downcasing
add more rigorous email format regex to user model