create session controller modify routes