emprovements on request spec
change how it looks
added sessions controller and form for signin
signin mechanics and coockie manipulation code
added signin status to header
signout ability
reference appearance