added create method to sessions controller and routes for sessions