- remove exposing IP
-- sync user session with socket.io