removed sessions controller, changed rules to separate page