made some changes, but rspec test still failling
limited what users can do signed in or out, code is quite broken.
Merge pull request #16 from decatan/master

Limited what the users can do signed in or out