limit each session to 10 MB