removed the session validation completely