fix deletaccount, fix changepassword, better UserModel, User.authenticate?
better controllers
fix deluser