starting on authentication
[MIGRATE] add Email to user, finish sessions

going to /login redirects to session create,
going to /logout logs out.
we need to add the flash area.