Editted the session controller so I can log in and log out. Added current_user and signed_in? helper methods. Now people can sign in and it actually creates something, that's trackable
Added the validation to the admin_controller. Now you cannot access the admin routes unless you are authenticated and signed in.