Convey accurate error messages to the user when a problem occurs.
Sign up could use clear errors, prompt for a valid email when not valid, copy the same regex password validation and run it in the front as well so we can communicate if a password doesn't meet our conditions.
Login errors should remain vague, only indicating that there is no username/password combination that matches the entered. Telling an end user that one is right and the other is not is a security risk.
Check all inputs in the front for error responses when empty, we should consider looking into filtering for urls in posts also to cover soliciting.
we can consider using the transparent div with the about us as a display board to push any other instructions. once we fix the font readability of course. considering polishing the login page as my next thing
Convey accurate error messages to the user when a problem occurs.