add a sessioncontroller and an empty login page
login page
invalid authentication re-renders new page
add remember_token to users
create remember_token automaticcally with user
add some utility funcions for session handling
add account menu
login-logout works