sessions controller create logic