added sessions controller and user model