don't inject session into models, view, fixes #122