created get_user function to get authenticated user from request session data
added decorators to require logged in, anonymous, and post; added settings page
updated existing tests