create User model
find or create user by email upon login
get/set current user based on session user_id
move auth_failure handler into a before filter