added functionality to confirm a valid user
password digest and controller setup