finish layout and routes
make a basic user model including secure passwords