added a SessionController and removed LoginController as not needed anymore
tie from SessionController to Bandango.currentSession
logging in from server-side
transition preventions for asking login and not-asking it
added /logout