updates user schema to require email & password