fix some errors and switch to thin for the web server

fixes unitialized constant error in user model (can't use BCrypt if it doesn't get required)
thin is prettier and less complain-y