cleaned up sign in route, added session controller.