exclude login and signup pages from auth check
add module rules for User
fix user find function
user management, security checks