aded a session controller
handling invalid signin
working user sign in
completed sign in out