refined user account signup, login, user/question lookup, fixed some security holes