updated session if user isn't logged in