provisioning; session state