add sessions-controller for login and lonout actions