add user model with secure password
implement sign up
implement user profile
move users to devise
add users to issues and require authorization for some issue actions
restrict project creation and modification to admins
restrict some project actions to admin-only