login/logout routes
user welcome message
removed evil newlines
user model and preliminary authorization structure. reports can only be published by 'report publisher'