session verification and no more null pointers... (lolz, right...)