refactored sessions controller to use sessions model to fetch user