fix user_sessions controllers, route paths