updated user controller, session controller, application controller