beforeGetUrl check session