added sessions controller and fixed the entries spec so that it only works when logged in
added a scafold for user controller