fixed overquerying. now all user and group details passed thru session