update README.md as we do not use sessions in the controller anymore
disable session