pass in session directly