added null_session to app controller