adding routes for session controller methods