modified controllers to show error when session expires