Add images to assets and DB. Protetect against CSRF forgery.
Add User model and associated methods.
Add routes and methods to Users controller.
Add user authentication scheme.
Add safety callbacks to controllers.
Fix bugs, fix some formatting, etc.
Add multiple sessions per user.