User validation and sessions with sinatra