wow, switched from a form_for to a form_tag on the signin page, makes the hash a little easier on the eyes (the params hash that is)