user model
Session controller