Add some validation for an email address and password when a user is
created.  Added migrations to add password hash & an index for a
user's email.