add user edit interface
handle removed users more gracefully with active session
read back id into model on save
add oauth registration