Authorization

Added login/user controllers and a session#new view with error messages.