add session validation to processing