user aop to set session