wrote many tests for user sessions and controllers