commented out session, added session dict

Ive replaced session with  a simply dict for now since i couldnt get the
session to persist the data correctly. I also added some helper
functions and added checks for login and roles to redirect as
appropriate.