http session update