change 'user disabled' confirmation notice
move logout method to user controller; some cleanup
clean up user model
worked on some of the unit testing
some more unit test fixing