add new, create, destroy actions to sessions controller