Add the authentication

add user model, sessions controller