created routes for users and sessions