signing in successfully looks up user by name
added some xss stuff
logging in and sessions workgit add cluster.py (xss protections don't though.. and no input sanity checks)
comments
just making sure everything is up-to-date in the repo