session, validate fix