users and sessions controllers added