session validation begin