session: redirect valid users to root from signin
config: use packaged Bootstrap-3.0.2
ref: use zombie to test User#show
session: implement logout