closes #20 - added sesssion controller and authentication work properly