Added redirection against unauthorized access to controllers
Changed session id