change session from $_SESSION