Update users to be determined by session, and create controllers and actions to delete favorites