- bug parsing the session header