Add session controller, add user password & confirmation