Sessions controller and added csrf authentication.