Use request->getSession instead of new Session