I hate double quotes.
add remaining tests for sign-in view success callback.
render errors as flash message and field errors when sign-in response is a 401.
I hate double quotes.
user_id index on authorizations table should not be unique: a user may have multiple different authorizations.