welcome and sessions controller, login routing