added task model
tasks resources routes
fixed route; devise route before user#show route to fix conflict
attr acccessible for username
logout button on layout if current_user
form for new task
can only view user's own show page