added redirects to session controller