Changed the directive for mfa-session