fix session cached by browser