add validation from controller if session isn't null