using session to send data, instead return