fixes user sessions controller and allows login