add login form
update create method
session controller stub
fix flash bug
finish create method