Add sessions controller to handle authenticity