fixed session leaking