downcase email before saving
add bcrypt-ruby to gemfile
add_password_digest_to_users
add password_digest column to users table
run the migration