finish the sign-up form
finish sign-in
auth for no-signed-in user and incorrect user
finish users index, deleting users