CRUD routes for user, session added