made a start at putting paas.session calls around all controller methods