added session info to user resource
failed logins will now redirect to http from https
Merge pull request #557 from paczian/develop

failed login https fix