before user model
make a basic user model (including secure passwords)
add bare user pages
add working test for user pages
add gravatars
finish user signup
add SSL in production
clean up flash message code, add error message test
finish sign in