init session if the user does not have any