added 'when-not-authorized' tests
added secret key base
added pw for postgres user; (couldn't create a db w/ a nil password
readded shoulda & study model spec
added in light-blue template; fixed poorly formed/indented index.html