resurect sessions_controller.rb -> login, logout