removed forced ssl encryption on user and session controllers because openshift doesn't support custom ssl certificates and that causes the browser to display a scary warning before the user tries to login, saying the domain is not what they are expecting. changed routing for all of the 'pages' actions because it was trying to catching too many routes for users and sessions. also cleaned up the forms and added a collapsing feature for the nav bar on small screens.