sessions controller and login form