Finished user and session controllers