fixed session verification so new user can register