add session controller with create and destroy sessions