added SessionController resource

added login/logout with "auth" filter