added users and sessions controllers, with bcrypt-ruby'