remove request session from app layer since it's the same as refresh session