Fix: session controller