removed session route limiting