rewrote sign_in to use form_tag, improved tests by decooupling test from other code