add sessions controller for sign in and sign out