create authorization class, use it.
style alerts
update the user factory, fix some specs
precompile assets