added session and user controller and login routes