adds awful but functional validation for user session