investigating deployment session timeout issue, hardcoded session token into before action check for all controllers