sessions moved to server