Merge pull request #2 from gregRV/user-auth

User auth
user can log in. session stores current user's id
added helper methods and updated session controller to use methods provided by has_secure_password