adds controller tests for session and user