Sing up/in. User has his cards. And only user can crud his card

можно ещё `user.try(:authenticate, params[:session][:password])`