session uses lapis.util.encoding