[BUGFIX] correct permissions for session folder