add sessions controller

add login, logout actions
add login, logout action rspec files