using client-sessions for maximum securiteh

better safe than security

@lloyd <3?