Added full user model/controller and session model/controller as per Railscasts 250.