modify: header and session controller