update readme with TODO, controller test session destroy bug