added sessions controller and corresopnding actions/routes (new create destroy)