updated session controller to run authentication on local