user and sessions controllers added