session get completely reset before auth