added specs for users_controller and sessions_controler