adds routes for users and sessions