move foreign key from account to session
add sessions api