add sessions controller and test