New feature: add SessionController with :new and :destroy actions (pending :create).