removed unused route
using client-side sessions