Moved session functions to separate controller

Signed-off-by: Tom Wright <tom@inflatablecookie.com>