fix session stop then not authorized