reorganise routes under site
add log_user_in(@user) and log_user_out at ApplicationController
restrict access to restricted page if not logged in
add navbar partial for log in vs. log out
add flash messages with noty
fine-tune