security and naming refactor. signup stage 1 (school) teething issues with default category assignment. stage 2 (user) started