added user model; users and sessions controller; updated routes