add sessions controller
Before i fuck it up
first working auth with validations