change forgery to null_session