session now works