Clean up get_session_data and set_session_data methods in all controllers

This change, done extensively in this PR, is fine provided that the variable is not ever going to be `false`.  If `false` is a possibility, it's a change in behavior that would need to be reviewed further.