updated for session & authentification