did most of sessions + authentication
login/sessions seem to work
fixed some stuff with login