sessions controller generated
check if session checks for right password
the session create action redirect if password and user is right