added the user sessions, user authentication and user authorization
fixed merge conflicts - routes and schema