add spec for manage session
fix controller usage