Change authentication method to has_secure_password
Add session scaffold
Login/Out completed