added user, session controller