added sorcery authentication, simple views, controllers

Karim did it all, I can't be held accountable.
better to do  `resource` instead of `resources` here.