updates to session controller and user model
removed sessions and user, now installing devise
used 2 year old code, need to revert to lst commit