add route to initialize user session