cleaned up sessions controller