added more session validations