Introduce basic SessionController

Implements an empty implementation of the SessionController, where all
methods return MethodNotAllowed.