add user_controller and session_controller specs