create a sessions controller