mv session_start() to lib/common.php