using session information in browser