update: added get, post, put, delete routes for /sessions/:id and get for /sessions