removed unnecessary items in session controller, removed from routes, and added flash messaging to login