Extract session controller logic to SessionController class per MVC architecture