session controller fixed