get session and request attributes