defined app.sessions route and app.session route