error handling / session / no js redirect