remove session in the controller