added sessions controller
user authentication complete