scaffolded Sessions resource
Added authorization to sessions actions, moved sessions views to HAML