map login filter to /user/* and /todos/* urls
remove useless tests
change email field type to email
add validation logic to registration form