cleaned up routes and session controller