remove $_GET and $_SESSION checking
remove key session checking