reimplemented sso session