add ApiSessionAttribute for WebApi Controller.