implemented /api/signup
correctly detects if user already exists
secondary indexes, done