implement session user id verification