session with user id and role
session with user id and role