add User model and controller and views
add sessions controller and helper, cat ownership
add protection from cross site request forgery