added session to controller