stupid sessions controller with commas