add session
fix controller