Fixed request and session injection

Forgot to inject the request instance and the session instance into the
controller. Now fixed.