fix session
fixes and acl