modified sessions_controller and user model