auth and sessions seem  solid and can tweak when we merge.Twitter bootstrap is in. controllers should have html/json respond to laid out