added user encrypted password and sessions controller