fix session security issue (same session on multiple instances)