changed controller used for session
added sign in page and routes