bugfix secure session