Migrate user and session controllers to appframework