add bcrypt auth and session helpers
show all users in index if user is signed in else show 'welcome'
user can log in
refactor user login