remove new-session since we are just going to send the session and user id every time now.