added failure route and failure action to sessions controller