users and user sessions are almost complete