fixed sessions controller so it shows error when try to sign in with wrong email or password