add session verification for images pages