added password digest?
added tests for password and password_confirmation