completed Sessions controller, ready to test