creating user/user session models and controllers