add route for sessions int route.rb