add sessions controller and remember token