initial user sessions work

user sessions working. not yet attacked attaching users to posts.