combined username validations
moved user password updating to new controller
put :only restriction on comments resources
moved most played games section into it's own controller
added failed_logins table
added FailedLogin model
limit login attempts