created README file to document the exercise and added my game plan
added encryption for password in DB
added some password length and complexity restrictions
added flash, username display, and logout link to layout
added login page
fixed specs to use new authentication method
added tests for login and logout
updated README with login/logout tasks added after start
restricted non-admin users from managing users
fixed site list not requiring login during interactive session
added tests for user access controls
made a nicer login route