Added User model and migrated up
Added prevention of mass assignment in User model
Rolled back to earlier Rails; added username/email validation