added user signin/signout functionality; completed ch.8
finished exercise 1 of ch.8, refactoring to use form-tag instead of form-for