small refactoring to controllers
fix issue where user is logged out and saw stack dump
need to login should be 401s
add login link to 401 page
need to do something better when user deletes themselves, but for now attempt to delete session