fixed some session handling errors, and renamed cart_controller to carts_controller