add create action to sessions_controller