Adds sessions logging in with Facebook

This commit huge because it’s the result of a lot exploration.
  * Adds sessions controller with create action
  * Adds map and creator objets for session
  * Adds map and creator objects for user
ignore .env

wasn’t being ignored automatically for some reason.
adds Rack::Cors

TODO: should restrict the domain and resource