updated for session & authentification
updated for session & authentification