move anonymous user out of session initialization.