failed login retains email
unit test for signin failure
require login to edit profile
refactor require login to edit
only allow users to edit own profile
friendly forwarding