not-yet-working http session manager