logout() to handle if called with null user e.g. in case of session
timed out
Follow grails default codec setting with tag output
Validate signupform login and password with same rules as domain
objects. We should not accept values that will not persist with GORM.