sessions controller improvements