mistake, the contrib.sessions is not required