(WIP) start session routes

not linked back to database yet