updated session validation