added tests for authentication by testing session and users controllers