Updated app.js so that SessionService was injected into .run