fix req.sessions