[add] implementation of /signup
[refactor] AppController.login() moved to SigninController