Password Resets looks reasonable, and removed roster routes.
Rearrnaging the remainging routes that need to be reviewed.
Families routes seem to be reasonable.
Minimizing the surface area for user_session controller.