update core to use php sessions