move `UselessForm` into form.py as `Form`
all authenticated users are superusers by default

by default, all authenticated users are also authorized,
and have permissions to do any operation