update session integration test
token serializer
add session controller