finishing touches. Updated session_controller, session_controller_spec, user.rb