add sessions requirements and controller.js
wip