Authentication

Sessions are now a thing throughout the app.
You can reduce the duplication of setting up a user with a `let` block.  https://www.relishapp.com/rspec/rspec-core/v/2-6/docs/helper-methods/let-and-let