working on new session management
better session management (without cookies)