convert session handling to redis