add session on URI encoding, enumerate some issues