add basic bcrypt protection to users passwords for security purposes
create session controllers
change other controllers to reflect addition of sessions
changed params to sessions rather than session for consistency
changed tests to reflect sessions rather than session for the sake of consistency
fix merge conflict