fix tests and add basic authorization
start user index
Finish user CRUD and cookies session (safer)