add a session controller and a session helper.
finish authentification