changed routing for sessions in the user controller to match forms in in...

...dex view