change user sessions in sessions.controller to enable login/logout