working tests for UserController
user and session tests not yet fulllll coverage