user shenanigans & db stuff
Finished first cut of the User model
password stuff & attr_acessible fix
make things prettier; also: got a few issues to fix