Added the session controller and new page.
Added session create/destroy, and isAuthenticated policy for the user controller.
Moved the flash message to layout, and added user navigation.
Added admin and user profile policies.