add tests for get and delete session
start working on deleting user