adding session controller methods and specs