fixed bug of data-method=delete; added sessions controller with signin, signup and logout