added login and logout via sessions controller