bugfix: session