fixed sessions controller