user now also requires email address
removed user, but added some cool stuff too
User can sign in with Twitter via omniauth