added sessions controller and the create and destroy methods