uniqueness validation for email
added password_digest to users and installed bcrypt
validate password length