rename password to password_digest
user can now signup