added logic to user/edit page so users cannot edit other user's pages.  Also cleaned up/refactored sessions controller