removing sessions controller / stuff, attempting session based control of views