add more constraint and unique to users model
fix signin page spec for form field name
refactor signin page spec
init user page
get user page need to authorized
refactor better cookie token generator