Add authentication

add user model, sessions controller