added users and sessions controller