Moved User and Session controllers out of Api, working dashboard and splah pages