some format
finally locate the csrf problem!
basic user model and views stuff