refactor sessions controller
push logged in / signup messages down to the user model, refactor a bit, remove default omniauth.mock from spec_helper