add users resource and sessions controller, limit access to app
add navbar