removed controllers directory and finished session system

removed controllers directory and moved model function to the model
itself much cleaner this way. Take a look! :-)
also changed UI Routes for better security