revert back to /security/session