updated routes and adding session controller