resource model, sessions & user controllers