better checking for user.sessions on initial controller load
and the prod scripts