update user session handling