added authentications
fixed session controller