Study some: route, testing...
Add index and validation
Add bcrypt-ruby gem
Make a basic User model (including secure passwords)