set login for every secure page to set username
css fixes; change username only when successful
set gravatar
add message form
toggle settings for logout/login after callback
css fixes; added friend page
add friend functionality