updated config to use encrypted session cookies
updated the session session to match ip addresses.
autoloading: session and database libraries
added login functionality to header.