Add csrf prevention
Add remember_token to users
Add flash error messages to layout