user can log in. session stores current user's id
added helper methods and updated session controller to use methods provided by has_secure_password
Merge pull request #3 from gregRV/user-auth

User auth