Update users_controller.rb

Session belong in the sessions controller.