added session logic to users_controller
isolated controller testing discarded in favor of integration testing
isolated controller testing discarded in favor of integration testing