Basic security auth, ban and session menagement
Added some extra routing logic to front-end
Some session-cookie work
Implementation of bcrypt hashing and comparing passwords
Logging err passwords attemps
Limiting login attempts
All are great fun
All-round use-case-tests are required..