wrote tests for the users controller.  all passing
added a persisting session to a new user