first commit of shared session filter, not tested yet