writing user session api
return session