refactored session verification / update