added sessions controller and specs for sessions-controller and users-controller