added signin form and fake auth
add users and real login