only store session if no current_user