sessions controller and a few routes