added session scope to controller