session handling is done