delete lesson_time session after lesson is created
add image to users table
refactor session-based lesson creation
refactor set_instructor action
only student and instructors can see lesson (and general auth before_filter)
don't ask for passwords on edit page if facebook user