added sessions controller and omniauth