session and user controller specs passing, list model specs written