added user and session controller