Reimplemented Session controller to allow ajax login with json + test
Removed comments from routes