added user authentication and sessions controller