added rspec tests for users and sessions