Added integration test for purchasing a product
Added admin login, session tracking, and user model
updated tests of admin login function
Restricted access to admin functions and whitelisted public funcitons in their respective controllers