fix session object not getting create on each request