added tests & controller for sessions