notation about session management in the TODO