fixed configuration issues: added encryption key setting required for session management
reconfigured default route back to welcome.php
user management: adding user model for creation, authentication, updating and validating users