only store admin.id in the session