strong params in userscontroller
naive implementation of password_digest