request.session.model
This makes the controllers work also for public users, e.g. in the frontend.
c8df9fc