add a bean holding session data
add an interceptor to redirect not logged users to login page
move CORS filter to util package
move CORS filter to util package
add a method to find a user by email
add user web controller