Added session checking to Locations controller