sessions controller, some fixes for admin