add test for password
add session controller
add login logout
add more relations