through iteration H1

protect_forgery? error needs debugging
through H2, integration test
through iteration I2, adding users
through iteration I4, user authentication