made controllers subclasses of a 'logged_in_controller' that authenticates user before everything
added welcome controller
moved sign-in form to partial, included it in welcome page