added user MVC to app
added session controls