create and add code to sessions controller