done SecuredSession but not tested yet