Move password into user session to allow adding email to signout

* Made user_session route singular
* RESTful routes
* cleaned up the views