start session before controller constructor is called