Switch to polymorphic associations for members and ghosts.
Move authentication to MemberProfile class and reimplement with has_secure_password.
Move session logic to Member model and drop "profile" from model and table names.
Begin to move user model logic to member and ghost models.