moving templates to public to avoid rails routing
addded sessions, working on preventing default hres
Authenticating sessions on the client side