add some authentication plumbing for rails side
add session controller and spec
add user controller specs