Admin login fixer upper

Adds new route that allows admins to login. 
Fix up user session/admin session validation 
Can we set these as two separate routes, rather than having to branch based on referrer? Perhaps `/sessions/user/` and `/sessions/admin/`?