move check_password into application controller
redid routing, board management specs passing