Removed session controller and some spec tests
Returned attr_accessible to password and password_confirmation