backend for tasks
the session is verified on every request
deleted files removed
reame file