add in session controller and current_user method