create sessions, Login/Logout,and authorization flow