added user authentication in sessions controller