provides access to session.currentUser based on user_id in authenticated cookie
add rudimentary user signup