automatically unserialize session data