- fixed cookies property in http.request
- added session property in http.request
- added session property to controller base