session and crypto