Extract user and session management as a sub-project.

logig and logout URLs are changed:
- /session/login -> /user/login
- /session/logout -> /user/logout