fixed login form for session controller