fixed bugs around session routes