sessionService needs to be autowired