controller - bug fix

Refactor the handleSession function to ensure a session id is always
created.
quickstart - bug fix

customer pages were always going secure. Support for non-secure pages
now available.