changed resouces :sessions to resouce :session. users must be logged in to edit/delete movies
use restrict_access to block require user logins before actions
Merge branch 'feature/session-resource'
resources :sessions => resource :session