remove session from client.
fix path.
instagram client is scoped to request and controller injects access token.
remove whitespace.
create login/logout links.