Added sessions controller, updated routes/secret_token