removed session_controller.rb