fix authenticated session bug