users, sessions, and references