fix session controller's before filter