Fix user controller to add session