move oauth/session code to sessions controller, delete unnecessarily tracked files, fix .gitignore