user updates
- check for admin in admin & tracker views, show 404 if !admin
- check for user in other controllers, 404 when !user
signup update
- elegantly handle existing emails