config routes
add login view
create user model
user login set token value
has_secure_password
use  protected_attributes gem
add new css
add logout method