adds authorization helper methods to application_controller.rb
creates session_controller.rb