session model
    generic session controller