added a sessions controller
handling invalid signin
completed sign in, sign out