refactor: users controller, added session[:id], cleans up routes a bit