refine what to do when no session info is sent from client