modified session controller for institution id