add sessions controller
finish login & logout