added user model and sessions controller