cleaned up routes and session controller
added beliefs, separate from users