fixes in SessionController