initial version of session controller
allow only authorized users to create articles