implement auth method on User
setup restful routes for login logout
add session helpers
fix bugs
implement login
implement logout