Did so much stuff.
Start
Cleanup.
Finish user_passwrods (controller, routes, views, mailers).
Better email for user email verification.
Better security in UserPasswordsController#new where we check for password reset token in params.
Login user after signup. Duh.
Actually use the super awesome ActiveRecord::Base#create_unique_token_for_field.