Add user authentication to sessions controller

Users should be able to enter an email and password to log in. A route was added
to the sessions controller to allow credentials to be POSTed. If the login is
valid, the user is redirected and if not, the user must try again.