add users, sessions routes