user signup and login are implemented with flash messages
signup and login via username and/or email address