stop sessions starting: $request->getSession()