change routes and conditions to ensure privacy.
pass a capybara test to see if they can log on with invalid fields
-still unsure how or why it adds a file when a pic is uploaded.  Perhaps a paperclip function