Encrypt user data

[cmcavoy]

Some of the fields we're collecting in #338 aren't necessary for the day to day running of the site. Any data that aren't essential for the site should be encrypted and stored separately from our main database.

Fields we need day to day

• user name
• are they over 13?
• contact email
• first name

Fields we should encrypt and store

• school (text field)
• cps student id (text field)
• gender
• race
• zipcode
• date of birth

[cmcavoy]

adding this to 1.1, not necessarily for release - but to outline a solution.