no need for session model derp
add User#set_session_token! and stuff
add session controller specs
add specs for session
fix session/s and add root and add some specs
pass session specs