[#63] refactored sessions controller to handle authentication exception