Namespace paths in session controller

Some paths in the controllers didn't have `spree` attached to them. This PR helps place those routes in the spree engine namespace.