move sign_in/sign_up out of categories controller to sessions controller