rename db.py orm.py

less confusing to have self.db and orm.User
than self.db and db.User.
track last_activity timestamps in proxy table

closes #10