move session views to separate folder; update api-driven redirects; update client-side routes