added create method to sessions controller