add user scaffold
add session controll