fixed removing users from session