added user model and session controller