add sessions controller and current_user