added sessions controller , create and destroy actions