add find by credentials and password tests
add basic new user page
add session controller and views
add before_filters and links between pages