completed user login functionality and sessions controller