verify_session action