Allow an user to signin/signup

resolves #1
I don't know. `getUser` seems good.