updated Exercise3Controller.cs - using session variable