worked on users controller and sessions controller