renewSessionId in user create, unauthorized exception when sessionId is empty