base of user model, added session + mongoose
stupid .DS_STORE!