don't set session when it already logged in