created user resource, session methods to support signin/out/up functionality