generate users scaffold and update create/update actions. add tests for new users
build out actions for users logging in and being authenticated. add routes needed
restrict access to admin pages, whitelist actions not requiring authentication, add test helper to login
add login/logout/admin links to sidebar, prevent last user being deleted