adding back Files Api, removing user data from session