set up the sessions routes