autoload session
added encryptionkey
session check