handling of user session flow, done