Update for example3, moved all session related operations to the abstract controller.