added sessions controller
Updated tested for failed logins