Authentication

Sessions are now a thing throughout the app.
After talking with Mike I thought they might be important to make sure session[:user_id] is actually nil and not some empty string or something.