remove arbitrary valid session method in application controller