added verify_user method to restrict access to the site to current users.  also added a redirect on the root page to the users index page if a user is already signed in.