expose session API