added sessions_controller and related tests