add session controller, spec, helper, and helper spec, not using Devise after all