don't hit users/me on all state chnage
use normal devise sessions controller
more test flakyness
redo route protection
reduce http requests for fonts
fixup redo route