Removed controllers and moved models outside.
added login support. corrected session serialization an deserialization.
Added bcrypt and encrypted passwords support for authors.