change session verification to use a resource
bump version