Add sessions controller to restrict user edit

This keeps users from editing other user's pages through the current_user before_action.