add valification step to make sureuser sesssion is valid