Remove unsued and broken route.

There is no Spree::SessionsController anywhere. This does not currently
work at all. #legacycode

Fixes #197
Fix bug where @spree_user is not being set before re-displaying password edit form on blank password

Fixes #199
Fixes #198