create session controller, add start of authentication