begin writing UsersController new/create actions/views
update UsersController#new to do something more sensible
add validation on password length