completed test cases for user controller and session controller in rspec