use app name in session key