Make a basic user model with secure passwords
better e-mail validation
end of chapter 6