force_ssl
clarify how to generate secret keys on README
configure Devise config.paranoid so that we don't admit when an email address is found
change 'Destroy' links to 'Delete'
fixed test to work with 'Delete' links
use username instead of email for login