session controller and rest of changes for nested routes