add sessions and save user to session on creation
add user sign out with tests