Add sessions controller with create and destroy methods for users