some corrections in sessions controller to work with users & admins