add a static page controller
before modelling
make a basic user model including secure passwords