http session udpate