fix user oauth method and sessions controller pathing