make sessions controller, methods for new, create, and destroy. also make first routes