cleaned up users and sessions controllers. started to add admin role privileges in views.