break validate forms out of constructor, start session
adding login session to header
adding ignore keyword to gitignore