user signup, authentication, and authorization
flash messages
fixed password length/absence bug