checkSession always enabled