I have a question on the users authentication.

If the user is not on the users list, should we redirected to a registrations page or should we just add the user to the list?

A registration page is not required for this assignment. You can create one if you want.

A username/password failure should take the user back to the Login page.