only use one 'requests' session