create and destroy a session