fixes #3, application now access session user id