change addUserSession to protected