crud with sessions and nested resources