LOGIN_REQUIRED ALL THE THINGS
add logout link (not a very nice one, but it'll do)
Lock down verdantusers app to users with can_change_user permission only