fixed session error in users()