giving up on validating uniqueness for now
generate sessions controller
log in is working