using session from user model