Add sessions controller to restrict user edit