made more struct fields of controller private and added methods for handling sessions thanks to andre moraes (gorilla/sessions)