added sessions controller and sign in and out routes