Replace form_for with form_tag on 'sign-in' page
Finish user edit, update, index and destroy actions
Add some secure features and tests