Complete basic user authentication with sessions

[noobling]

This seems to be working with limited testing using postman (its an app that allows me to make url/api calls)

If a user is logged in then you will have access to this user throughout the controllers through req.session.user so you can make useful calls such as req.session.user.name throughout the app

[noobling]

Issues:

• This will break the production app
• Code quality isn't the best perhaps someone could refactor this code @thaingu @alexarnold94