added user authentication, new user forms and sessins, sanitized all login pages