added a sessions controller, moved some logic out of the users controller to the users model, created a sessions helper and persistant login