added sessions for Admin access, no UI links yet
Sessions controller and Admin controller
authorize function in application_controller
whitelisted the actions in other controllers that dont need login
updated some routes
added test helper so tests dont break for login