some refactoring with mike
users create, setup for sessions data
feedback from gary: valid_request -> require_authenticated_source
rename current_path to current_uri :)
remove comments
security up to sha512
code climate