Renamed _destory_session to _destroy_session (oops)
Rearranged the commit call to occur when no exception has occured, not in the finally statement
Completed user sessions, user registration, and password encryption