finish basic user authentication and page protection.  migration to change user to username has not yet been run
Finish user edit, update, index, and destroy actions