added basic signup form
moved access control handling for admin state to authCheck property of userapp
implemented login as interception
userapp merged pull request