refactor session service for already authenticated users, and anonymous users