implement sessions controller