changed from sessionStorage to localStorage for security reason