user class and login form added. Controller checks for user session