Added logic to NOT start sessions for bots
Removed session_start in controller, removed exception from Security class

Security class doesn't need to bark so much, just fail and move on