added user auth to the user model
added sessions controller and the associated tests