add users and sessions controllers, add routes, update checklist