added sessions controller and tests