user controller
added auth controllers; password and sessions