added simple omni auth authentication and session setup