create session on attendeeID and some restrictions in view_where function on attendee controller
only admins allowed to access view function of attendee controller