added the routes and resources for restful actions for sessions
fixed authentication test to visit signin_path instead of signup_path