Margaret branch

*profile controllers are working
*some code for verification and rules have been commented out...take a look
*updated login modal to reflect session flash for error
*added CSRF construct to basemodel for added security