properly getting the session