Fixed ideas search params for getting popular or recent ideas.

Strings no longer have their own 'to_a' method in Ruby >1.9.
The strings are put into a single element array as an itermediary step. 'to_a' can then be called on this array.
Hiding some token memorization that I think belongs to the rails_authorization plugin.

Eventually it should be entirely dependedent on devise.
Hiding homegrown password validation/encryption and account activation.

This functionality should be entirely handled by devise.
Mapped session routes to the extended devise controller.

Devise comes with its own session manager. This should mostly eliminate the old controller with the exception of the custom twitter and facebook authentication.
Inceased bcrypt's cost to 15 in non-test environments.

This will need to be adjusted at a later time depending on production environment preferences.
Moved session logic to the new extended devise session controller.

Some will need to be changed to actually support how devise handles things and to integrate twitter and facebook sessions into it.
Deleted old session controller file.
Moved session views to their new home in users/sessions.

This is their proper home for working with the devise gem. Old location wouldn't be referenced or displayed correctly.
Reworked bcrypt cost again.

Set cost to one in both development and testing environments. Slightly reduced the cost in all other environments.
Added missing config stuff for sessions controller.

'ostruct' is OpenStrucy library.
Require no authentication when creating a new session.
Using basic registration controller for the time being.

No twitter/facebook authentication is being done at the moment. Only authentication checks are being done by devise.
Also added missing filters for when to require user authentication. Any other actions do not require logging in.