sa session must have request scope GH-65