redirect works! session fails though