add session controller, add specs also