session handling implemented