fixed unresolved session
experimental use of the main session for storing oic session and auth session