Add auth check to sessionsCtrl