add helper function for auth checks
add csrf to public form
add users controller
add user views
rename signup controller
allow no args to be passed to can
add note about helper function to readme
use some better spelling