restful routes for session management is in place, time to clean up the user resource
signup form is in place using RESTful UsersController methods, but validation logic belongs in the model