session cookie is just available in controller