Authentication work

force authentication in app-ctlr
remove :registrable from user model
skip authentication in cellar, but remove route to it
see admin user
suppress logout link if no current user