added xss
added session