need to test, but:
* fixed stylesheet links
* used helpers to dry up app.rb
* used sessions to hold on to user.id and not the entire user (cookies too big)