adding session id and validation