updated the sessions controller to handle the new password and email field