comment out cross domain for now (causes issues)
treat session as an object and register it in app.js

-also populates controllers & routes with a session object
-store user id instead of username for now
use internal session object + code clean up
move logout action into logout controller
include debug information about authentication for now
removed setupController key
move action to the opening form tag
only show add bookmark button if authenticated
move jquery-cookie out of dev dependencies and into regular dependencies
include user id too after session creation
initial implementation of index route