default to not using sessions