changed session store from cookie based to active_record_store
Added need for resources to authenticate user thus allowing the session values to be readable, and obviously requiring the user to be logged in to upload files.
cleaned up repo of unwanted files. I really should add this directory to the ignore file for git