Break out the signup logic into its own controller.  Take out the "title" field from the templates, as it's not used.  Change the routes.  Start renaming stuff to "boilerplate"
Rename from authorizationFailed to loginFailed, to be clearer.  Move the SESSION_ID out to be a def, so users can change it.
Check in some working application specs for login and logout.
Check in a signup controller spec in addition to the application spec.
Add a faked out integration spec