added authentication branch and sessions contoller and session model