updated routing for cleaner urls
made sessionprovider testable
moved session into provider