finish the sessions controller and user sigin in action