created user_sessions controller. login functionality working:
added brute force protection
added remember me checkbox to login