Add remember me functionality as well as switched to auth_token usage in cookies instead of session[:user_id] since it is easy to forge simple user id
Add password resetting and usermailer