add session controller new and create methods with tests