add logic to sessions controller to get user id into params