add sessions controller create, new, and destroy methods