application error: user can reset client session