fix the password field need hidden input
fix forget set creator to post/comment when create
the other way to handle login faild
modify flash[:error]
add TODO note of comment body empty will casue app crash
add feature let user auto login when register success
add password length validation when user update
fix logged in user can't login or register again