added before actions for login & setup controllers.

the check_session before action,
if session is expired
sets the "session expired" message in flash[:alert]
and redirects to home page.