session controller revert to sfdc auth