completed session and user controllers and views