make token.class initiation global for all forms
change update.script and password.script redirect

incorrect redirection fixed (instead of to logged in user to user in
uri)
redirect to home page from sign-in
add sign-in form to nav bar on every page