finish authentication stuff
bootstrap
user password confirmation, email required, uniqueness