added user sessions controller so user can now login/logout