bug fix: session variables