add User model and sessions controller