Add session controller with new, create and destory methods

The session controller assumes that session[:current_user_id] will store the session cookie and the helper method current_user exists in the Application helper (it currently doesn't).