when creating sessions, ip addresses are now optional