sessions are now filtered by user