completes basic user authentication

* adds new file session_controller to manage sessions
* adds authenticate class method to User to authenticate password passed through params
* adds create methods to session_controller to set session[:user_id] if passed authentication
* adds current user helper to sessions controller
* checks for current_user on index page
* tests for all above features