Added a few more acceptance tests for registration.
Refactored session based logins such that we now store the user's id, not their username.