fixed sessions controller again