add some things about session management