bugfix in session update and separated GET and POST queries