resource/session/user controller defined