add password_digest field to users