Create sessions controller, routes and create method.
Write a failing test checking the falsh does not persist - then amend flash to flash.now to make it pass.
Include SessionsHelper module into the base class of all controllers to make it available to all controllers.